427 matches found
CVE-2020-0998
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.In a local attack scenario, an attacker could exploit this vulnerability by r...
CVE-2020-0875
An information disclosure vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system (low-integrity to medium-integrity).This vulnerability by itself does not allow arbitr...
CVE-2020-1250
An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log on ...
CVE-2020-17031
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17075
Windows USO Core Worker Elevation of Privilege Vulnerability
CVE-2021-26882
Remote Access API Elevation of Privilege Vulnerability
CVE-2021-28435
Windows Event Tracing Information Disclosure Vulnerability
CVE-2020-0836
A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become nonresponsive.To exploit the vulnerability, an authenticated attacker could send malicious DNS queries to...
CVE-2020-1252
A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convince a user to run a specially crafted application.An attacker who successfully exploited this vulnerability could execute arbitrary code and ta...
CVE-2021-26862
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-27063
Windows DNS Server Denial of Service Vulnerability
CVE-2020-0870
An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.To exploit this vulnerability, an attacker would first have to log on to ...
CVE-2020-1559
An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code execution on a victim system. ...
CVE-2021-26866
Windows Update Service Elevation of Privilege Vulnerability
CVE-2021-26873
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-26884
Windows Media Photo Codec Information Disclosure Vulnerability
CVE-2020-1228
A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become nonresponsive.To exploit the vulnerability, an authenticated attacker could send malicious DNS queries to...
CVE-2020-17026
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2021-26878
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2020-16854
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log on to ...
CVE-2021-26892
Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
CVE-2021-26880
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-26879
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2021-26872
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-26869
Windows ActiveX Installer Service Information Disclosure Vulnerability
CVE-2021-26886
User Profile Service Denial of Service Vulnerability
CVE-2021-26861
Windows Graphics Component Remote Code Execution Vulnerability